PT-2022-7642 · Mongodb+1 · Mongodb Server+2
Kevin Pulo
·
Published
2022-08-08
·
Updated
2025-05-16
·
CVE-2024-8207
CVSS v2.0
6.8
Medium
| Vector | AV:L/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
MongoDB Server versions prior to 5.0.14
MongoDB Server versions prior to 6.0.3
Description
The issue allows an unintended actor with host-level access to cause the MongoDB Server binary to load unintended actor-controlled shared libraries when the server binary is started, potentially resulting in the unintended actor gaining full control over the MongoDB server process. This issue affects environments with Linux as the underlying operating system.
Recommendations
For versions prior to 5.0.14, update to version 5.0.14 or later to resolve the issue.
For versions prior to 6.0.3, update to version 6.0.3 or later to resolve the issue.
As a temporary workaround, consider restricting access to the MongoDB server binary to minimize the risk of exploitation.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Mongodb Server
Mongodb